libqt4-network should have libssl in its depends list

[Marco Cimmino]

Since 12.04 Ubuntu is now multiarch, this means I can pull Qt and QtWebKit at 32 bit on a 64 bit OS, however QtWebKit does not depend on libssl so this means that using it will completely fail to open HTTPS urls.
http://packages.ubuntu.com/precise/libqtwebkit4

I think libssl should be added in the depends list, so when building packages it is also automatically added to the depends list.
This wasn't a problem before Precise because libssl at 32 bit was present in the ia32-libs so was 'easy' to depends on it.
http://packages.ubuntu.com/lucid/amd64/ia32-libs/filelist

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Steve Langasek (vorlon)]

QtWebKit doesn't use libssl, so should not depend on it. It only uses the QSslSocket interface from libQtNetwork.

libqt4-network appears to use dlopen() for libssl instead of linking against it. This is highly inadvisable; it seems to use a glob of 'libssl.*' to find the library, which could easily cause ABI-related skew (and segfaults). libQtNetwork should really be dynamically linked against libssl instead. But in any event, the libqt4-network package should have a dependency on libssl.

[Steve Langasek (vorlon)]

This impacts the usability of third-party i386-only packages in a multiarch environment (where it's possible nothing else will pull in libssl1.0.0), so warrants fixing in precise as well.

[Felix Geyer (debfx)]

> libQtNetwork should really be dynamically linked against libssl instead.

That's very problematic because of the GPL / OpenSSL license issue.

[Marco Cimmino (cimmo)]

Any update on this?

[Steve Langasek (vorlon)]

The Precise Pangolin has reached end of life, so this bug will not be fixed for that release